build(deps-dev): bump @earendil-works/pi-ai from 0.80.3 to 0.82.0

[dependabot]

Bumps @earendil-works/pi-ai from 0.80.3 to 0.82.0.

Release notes

Sourced from @​earendil-works/pi-ai's releases.

v0.82.0

New Features

• Constrained tool sampling — Tools can prefer or require strict JSON Schema sampling or use OpenAI Lark/regex grammars, with model capability metadata preventing unsupported requests. See Constrained Sampling for Tools.
• OpenRouter and Kimi Code sign-in — Use /login to authorize OpenRouter or a Kimi Code subscription without manually configuring API keys. See OpenRouter.
• Session-aware, streaming bash integrations — Bash tools receive current session/model metadata, while direct RPC bash commands stream correlated output. See Bash Tool Session Environment and RPC bash events.

Added

• Added inherited Tool.constrainedSampling with strict JSON Schema (prefer/require) and OpenAI Lark/regex grammar variants across OpenAI, Anthropic, Amazon Bedrock, Google Gemini, and Mistral. See Constrained Sampling for Tools.
• Added inherited supportsGrammarTools and supportsStrictTools compatibility flags, expanded supportsStrictMode coverage, and generated model capability metadata to gate constrained sampling.
• Added inherited Kimi Code subscription OAuth login for the Kimi For Coding provider, including device authorization and automatic token refresh (#6935 by @​zaycruz).
• Added inherited OpenRouter OAuth PKCE login through /login, minting a user-controlled API key. See OpenRouter (#6927 by @​rsaryev).
• Exposed PI_SESSION_ID, PI_SESSION_FILE, PI_PROVIDER, PI_MODEL, and PI_REASONING_LEVEL to commands run by built-in and factory-created bash tools. See Bash Tool Session Environment.
• Added streaming bash_execution_update events for direct RPC bash commands, correlated with request IDs. See RPC bash events (#6971 by @​ananthakumaran).

Changed

• Changed inherited generated model catalogs to expose only provider-verified reasoning effort levels from models.dev (#6928 by @​davidbrai).

Fixed

• Fixed inherited DNS lookup failures such as getaddrinfo, ENOTFOUND, and EAI_AGAIN to trigger automatic assistant retries (#6946 by @​christianklotz).
• Fixed inherited OpenRouter Anthropic cache breakpoints to advance through tool results and enabled cache control for ~anthropic/*-latest aliases (#6941 by @​mteam88).
• Fixed inherited OpenAI Codex WebSocket sessions to retry once without a missing previous-response continuation after previous_response_not_found errors (#6955 by @​davidbrai).
• Fixed TUI debug and crash logs to respect custom agent directories instead of always writing under ~/.pi/agent (#6958 by @​davidbrai).
• Fixed slow Ctrl+G external-editor startup when the system temporary directory contains many entries (#6903 by @​christianklotz).
• Fixed startup resource display to preserve relative paths for sibling npm extensions loaded by a package (#6964 by @​davidbrai).
• Fixed compaction and branch-summary requests to use fresh routing session IDs with prompt caching disabled where supported (#6618 by @​tmustier).
• Fixed explicit self-updates when PI_SKIP_VERSION_CHECK is set (#6977).
• Fixed scoped model IDs containing brackets to resolve as literal exact matches before glob matching (#6210).
• Fixed inherited OpenAI and Anthropic provider retry waits to honor abort signals and configured delay limits (#6980 by @​petrroll).
• Fixed fresh installs from preferring bundled model catalogs over newer remote catalogs because package file mtimes were newer (#7016 by @​davidbrai).
• Fixed inherited editor scroll indicators overflowing narrow terminals (#7015 by @​christianklotz).
• Fixed llama.cpp models to use the loaded context window as their output token limit instead of capping it at 16K (#7034 by @​christianklotz).
• Fixed release source archives to include the generated provider model data used to build standalone binaries.
• Updated the packaged protobufjs dependency to 7.6.5 to address GHSA-j3f2-48v5-ccww (#7005).
• Fixed /copy on Wayland to fall back to X11 or OSC 52 when wl-copy fails (#7009 by @​rkfshakti).
• Fixed /model to reload updated models.json configuration when opening the model picker (#6999).

v0.81.1

New Features

• Verifiable release source archives — GitHub releases now include deterministic, checksummed source archives with instructions for rebuilding standalone binaries. See Building standalone binaries from release source.
• Resilient compaction and branch summaries — Transient provider failures now follow the configured retry policy, with retry lifecycle events available to interactive, JSON, RPC, and SDK consumers. See Compaction & Branch Summarization and RPC retry events.

Added

• Added deterministic, checksummed source archives to GitHub releases with documented standalone binary rebuild instructions (#6913 by @​christianklotz).

... (truncated)

Changelog

Sourced from @​earendil-works/pi-ai's changelog.

[0.82.0] - 2026-07-24

Breaking Changes

• Replaced getBuiltinModelDataUrl(provider) with getBuiltinModelDataGeneratedAt() so built-in catalog freshness uses its recorded generation time instead of installation-dependent file metadata (#7016 by @​davidbrai).

Added

• Added Kimi Code subscription OAuth login for the kimi-coding provider, with device authorization, token refresh, and OAuth host overrides (#6935 by @​zaycruz).
• Added OpenRouter OAuth PKCE login that mints a user-controlled API key for chat and image providers (#6927 by @​rsaryev).
• Added Tool.constrainedSampling with strict JSON Schema (prefer/require) and OpenAI Lark/regex grammar variants, enforcing provider-side constrained tool sampling across OpenAI, Anthropic, Amazon Bedrock, Google Gemini, and Mistral. See Constrained Sampling for Tools.
• Added supportsGrammarTools and supportsStrictTools compatibility flags, expanded supportsStrictMode to Responses and Bedrock models, and generated model capability metadata to gate constrained sampling.

Changed

• Changed generated model catalogs to expose only provider-verified reasoning effort levels from models.dev (#6928 by @​davidbrai).

Fixed

• Fixed OpenAI Codex cached WebSocket continuations after grammar tool calls to send only the real tool-result delta.
• Fixed constrained tool sampling across Google, Amazon Bedrock, Mistral, and Azure OpenAI Responses adapters, including model-aware strict-tool capabilities, grammar configuration validation, and malformed grammar-call replay errors.
• Fixed cacheRetention: "none" to disable implicit prompt-cache writes for supported OpenAI models and session-based caching for OpenAI Codex (#6618 by @​tmustier).
• Fixed DNS lookup failures such as getaddrinfo, ENOTFOUND, and EAI_AGAIN to trigger automatic assistant retries (#6946 by @​christianklotz).
• Fixed OpenAI Codex WebSocket sessions to retry once without a missing previous-response continuation after previous_response_not_found errors (#6955 by @​davidbrai).
• Fixed OpenAI and Anthropic provider retry waits to honor abort signals and configured delay limits (#6980 by @​petrroll).
• Fixed OpenRouter Anthropic cache breakpoints to advance through tool results and enabled cache control for ~anthropic/*-latest aliases (#6941 by @​mteam88).

[0.81.1] - 2026-07-21

Added

• Added retryAssistantCall() for bounded retries of transient assistant failures with lifecycle callbacks and abort handling (#6901 by @​davidbrai).

Fixed

• Fixed Kimi K3 models from Moonshot AI and Moonshot AI China to use the OpenAI thinking format and expose reasoning effort support.

[0.81.0] - 2026-07-21

Added

• Added Qwen Token Plan and Qwen Token Plan China as built-in providers with regional endpoints, API-key authentication, and generated model catalogs (#6858 by @​QuintinShaw).
• Added contentText for extracting joined text from message content (#6840 by @​xl0).
• Added a shared uuidv7 utility for time-ordered identifiers (#6834 by @​xl0).
• Added optional usage metadata to tool result messages (#6671 by @​davidbrai).

Changed

• Changed generated model catalogs to keep TypeScript model shapes separate from ignored JSON model values, reducing generated source churn (#6765 by @​mitsuhiko).
• Changed model generation to validate ignored provider data before compilation; npm run build refreshes model data as before, while npm run build:offline reuses existing data without network access.

... (truncated)

Commits

• 083e616 Release v0.82.0
• e8d97fe feat(ai): update generated image models
• ee0dca4 docs: audit unreleased changelog entries
• 24bace2 feat(ai): support constrained sampling (#6341)
• 241431c fix(agent,ai): don't cache write compaction or branch summaries (#6618)
• 65ff8e7 fix lint
• ab55c15 Merge pull request #7016 from earendil-works/fix/bundled-models-generated-time
• bc3d364 fix bundled models generation time
• 7af8533 fix(ai): make provider retries abortable (#6980)
• 7b52cef feat(ai): add OpenRouter OAuth support (#6927)
• Additional commits viewable in compare view

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​earendil-works/​pi-ai@​0.82.0

View full report